Baijiacms Project: >> Baijiacms >> 4.1.4 Security Vulnerabilities
Cross Site Request Forgery (CSRF) vulnerability in baijiacms 4.1.4, allows attackers to change the password or other information of an arbitrary account via index.php.
CVSS Score
6.5
EPSS Score
0.003
Published
2023-02-15
A Remote Code Execution (RCE) vulnerability was found in includes/baijiacms/common.inc.php in baijiacms v4.
CVSS Score
8.8
EPSS Score
0.22
Published
2022-12-20
A Server-Side Request Forgery (SSRF) in fetch_net_file_upload function of baijiacmsV4 v4.1.4 allows remote attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the url parameter.
CVSS Score
8.8
EPSS Score
0.011
Published
2022-09-20